Analysis

  • max time kernel
    143s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 22:25

General

  • Target

    92d0bb8e742b03be017ca82f6afcf19b_JaffaCakes118.html

  • Size

    139KB

  • MD5

    92d0bb8e742b03be017ca82f6afcf19b

  • SHA1

    971d11586fc73330a7266fdda0c22ecfebe470e6

  • SHA256

    08c1794267c52666a5825fbd4023387241da9e944981be53c049f6b00a8d06b9

  • SHA512

    4ae245cd0b08bedc285423993e99c7e88ab2b086478d7962b8fff2fa5673e84a0e4a92e2989d6b13300173a9530b0a1bdb06c2f01d416ca7fd1f298480d14319

  • SSDEEP

    1536:SG7NMW8sRzGltRa7zyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3p:SG7OxqyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\92d0bb8e742b03be017ca82f6afcf19b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1312
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1312 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8820c27e483dac6e7bce750f39adbf7

    SHA1

    58965ce12cd25babc2597985f627849798d5e79a

    SHA256

    ed1b6f955392aec249fef940120b636967d3659cd08e9e7ab5ff7e18fe07a69f

    SHA512

    27a58dda1c8797940e6c132dc28925ad9d23e6013b3e6d68644cc21f3ef1a3dfb697e0af7b3d346cf85397fc03799fe0b47093000e560ede759eca9787af724f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    653e59a1ed8f1047061afde647d55a1c

    SHA1

    2cd9f5db483edabbaba851689b0ed08bfa3fc784

    SHA256

    dbb80830d3181ab1af4b3d1449f613521d6c2c2c4ef67c5aaa94090533b92540

    SHA512

    bd4508d5d9dba6bf422ceb8af28df323d6d371c38c2d17f97903d393b14f68141e50a732f1cefdcb85ecea01ce8f5193fd8def94b21ab3d15a142e9b833c4838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ab2557eb8366bc58f5fee73b20d4534

    SHA1

    17bb1b82c76f2c20acfb1b43894f9764df1119b0

    SHA256

    3f30e1a867f8822c14c70188bdcc1c93f30d7cc02effbc6d6bdc005dc442dd35

    SHA512

    423315879b3f90893a831b5a206ab6396e6e45068cfd6b2f9b1fef7b2ca02fea79d627748c7141e8e607b397ca0c60fd8d66653deb7090984aabb5e6ced5e7fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    134091bfe442dfe76bf5529b883fd360

    SHA1

    70d1cae03cad2b5e863f82da6448382cac7f213e

    SHA256

    cf2cc9aa5a8fac02f2015d0a867b13742b3e3bd2c580344127662ef8623920cc

    SHA512

    c1fd7f5936bcff90e2bb75e991b79a1d07a8a78e259743cacea41c671750039d172b26e17536945c75655105a721aaffbddef4d9f13a8f95d0c30f09f8f05f0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76536a1ea3ce9dfffd8783cd4770d400

    SHA1

    facae5fc990ca2f005da7a10edbdc5e0700d7f4e

    SHA256

    6cc38dd81e48a9b5ca3ab97016dd50da419494e49a9e440fa441b07b031a5f7b

    SHA512

    2aba499f5e74414903d979ee4a1519f590035118685fa25cbe025504f52ff9dbb107e90970fba840d81bda86b36795dd40cc7136e63fd225c418f0a30b88b9d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    447bc6d374501ab1d8a96f9717d9a196

    SHA1

    983b105dce646021ca99f0f3163c0a5c112471da

    SHA256

    31360b514e528355a11ffe1cc4fca8c53d87a1134c05f3580a4d0e1dd9351e4f

    SHA512

    371583ea4b3e0ab8e97a09302600f6b31b3f93bf17c82113dce4bf97b3644cc5a83a0665f0c4ef4187a3dfde15a87a082a53b0beae8ec865c003f0f07e7206df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c44241538a8babf0f9adb025501a8e63

    SHA1

    7456e96f853739b898e304ec20d28a6a18139e98

    SHA256

    8a2eea2c11f5e23c8712dcdc535762683638a066f9940dd177f2b05cd78986dc

    SHA512

    fb7db26bbe05699036ad3a3da4038c44957604e98b3f6a2c3209bc282d30b20176d779b6e1933b4cb4f8641d19ac6e84fb125d43cc6a59c1211e1b1da07b99e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1ef7786006049d05e2fca1df6b7c636

    SHA1

    44601060f47a896754cc088c8fe89013d3c2b4f8

    SHA256

    d6e26f1b1971407ce04f0b5457498295b784e956acd26545facf7011bd82583c

    SHA512

    e8f4d213f0f1451ff12a4e2b7d8983cea72491ab502017699d44540daf05af5afebe794e5de50b884e084af142e8ed577226274d23f3fbdec1c81ee644c7d4bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67d175d1d50e0e3d378a6a09045ee836

    SHA1

    03d80127dd9268f02b15a051eb81e89c00a85e14

    SHA256

    a16c0f1fc18d22d700a1307e3e98367b01116d7e1c1b12102897813a598fb93e

    SHA512

    6f88e0a493636c9657d5d9bd38b44aae9d19f9c2d44fed3fd5d33f41697b2d405e28cf1512be69ab749181395c0a9a7d743a2a191c04f35515c99ba2b8498c6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bd9b3bb550fefa228e212b6e52b0a25

    SHA1

    699b8622f4582fbaf3d1247fdb1c7b0d429f6efe

    SHA256

    4bcddb51f999e9efa680a920e97a5098590b46045072c7216c37665e538a5622

    SHA512

    26e852820aa88940a2d6b0edd70d83a27f5310afdcb0352443964fb080b0967f9038dcd529ee8d5dbb6ec22c8a0714492df7e7f75d9f996138dac8ca7f22a84d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f71f07ab2be8495c2536007d8a99d9c1

    SHA1

    53d870d10c376db4d13c2379cf84264d20ac7183

    SHA256

    7c9b7378122f721d926f5c6ce5f3b3bfd2728963a3ef2f30ce9e16f2539cf13f

    SHA512

    ad0d5cab509d7c67232895223bc84fca52656589a4b9a94f9a6dc54299fde4de4b08b830bb1102880cab8e3527d2af7bb88669495404fb5a92794be9206bf428

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43849ee7cca69250585ee8a6208207e8

    SHA1

    ef33847bc4179239309ca5c095b98656c6ae314c

    SHA256

    c58d1ad768d9defe45c0f2d2908017f52c8cff38603a296e178e19e4bcf6147b

    SHA512

    9da04c40eb86e4bd46103342b35b56d4fb5b48e370826315bd61b44efd253d87af2de76541cb01d0e22db8f61e4f8320d31a21bb523a9a8fd08dc4c30205718e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd479b240bdffc66b9ca2bbe7a0debd9

    SHA1

    aa267daa27acddffc945cb6a858198dea3e3fb96

    SHA256

    b102d65f4bff083ca21968f2c5a91fb6e4ff4fec78e49097de525937bd87f5a2

    SHA512

    6c2f854b7db566d1de957c295d7bc46646973b981e2769cc70dfaf867770a90de018e16df3a65d0b7db34f8f25582eb899d9c299a1a133afb1efa226f229c243

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f05487bf1de7fb43ed6f025b0c3e49e1

    SHA1

    4511ddddadb06c980343f78134008ace7c74b142

    SHA256

    86d89575fc64322920799f939471fcfb5097e3a5e24b0543558b61caad87c586

    SHA512

    21263e801a9164d0c32539931310fe52367bd50f1cead1da0ecabacd0f5e58fce646fe5910ee7474f45255dd90d74ae40d85d0f842cc4b4ca7c0059766c44300

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2323845aecfabaef76433b14b0572d07

    SHA1

    40dc256a3975b127770412159197740fb5a9f48a

    SHA256

    8f792efee8cb1a64088867a2f397472fe57504e17a4eba33cb4a7b0dd8ac3997

    SHA512

    af2b6d7e065476a4949177c5eb78b4c352255c396cf8707e1f3084c6eb9da3555456eda23775c049e98a5333e04d61673ab3298c4bf75a2aa7991034abbf8d14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f59a773a6d4f877b11b1eec9389e4085

    SHA1

    2606d908454a5dbba34ca0fb3f3811c64be1263d

    SHA256

    5aeedf77ebc0127a49bdb21c1f4f2579755d69c5d8c151a14a2f5eba0eb1fb0e

    SHA512

    7af6f3f5c257a591a0c570c07c832f561ae679804fc9b33c9096844f932c7d6dd0410ea9b19ddeba4edf0cc337accedf331ab548112b9c64af141e9a4e43b902

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e29d9708114bee3dc772c2f44c4992e

    SHA1

    ab221de85e0cb1b3250bfa907b5f1a4f6fcf71e3

    SHA256

    50857d6e4568aa3b9c0c0f688619d534daef5f3e037ad798c3a3867b2df2839e

    SHA512

    a187f7f6d63454445d075e01c547a3488c801a43116e2a24b5c90a11b591f8942f6eaec7e502ddc10c3e20b56f7891538b9fda43ce593f7505ec443410e6ae79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b291ea5319992308468d3fffbcbf0983

    SHA1

    a3a0c9f5534ecbbc20947f8dd2e6f97ab4eaf596

    SHA256

    e68958504a2d67ade3136f5d9093415e8114c90f417fafb17ed66d8deaa79929

    SHA512

    3cff66d87ba0134033a58674adf875623c697f2db36120e6fb212af3bb1a78a3249abe7f0433a1020f0b77b1d6941e00b0207c643f96af8f6709d066289a49d0

  • C:\Users\Admin\AppData\Local\Temp\Cab251F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab25FC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2601.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b